Job Description

Skills Required

n

Primary Skills: PM with Cyber Risk Management, Corporate Audit, Technology Services, QA, Development, Architecture

n

Experience : 10+ years

n

Key Responsibilities:

n

Cross-Functional Coordination:

n

Serve as the central point of accountability for project scope, schedule, budget, and risks

n

Coordinate cross-functional teams (Development, DevOps, QA, Security, Audit, Operations)

n

Run technical working groups and facilitate collaboration between technical and non-technical stakeholders

n

Escalate blockers appropriately and remove impediments to project delivery

n

SDLC & Quality Integration:

n

Integrate control objectives into the Software Development Life Cycle (SDLC) and CI/CD release pipelines

n

Drive design changes, code fixes, configuration updates, automated tests, and regression testing to validate controls

n

Drive continuous improvement in software quality practices including test automation, static/dynamic analysis, CI/CD quality gates, code review standards, and release governance

n

Governance & Reporting:

n

Establish and report key performance indicators (KPIs) and dashboards tracking remediation SLAs, defect escape rates, control effectiveness, and test coverage

n

Communicate status, blockers, and impact clearly to leadership and Governance/Risk/Compliance (GRC) stakeholders

n

Ensure alignment with relevant GRC requirements and maintain up-to-date control mappings

n

Prepare executive-level risk dashboards and metrics providing transparency into security posture

n

Risk & Compliance Management:

n

Work with GRC teams to assess and document security risks across products, applications, and systems

n

Collaborate with remediation owners to develop and track resolution plans based on risk severity and business impact

n





Ensure compliance with regulatory and industry obligations (PCI-DSS, SOC 2, ISO 27001, NIST CSF)

n

Cyber Remediation Leadership:

n

Lead end-to-end technical project management for cybersecurity remediation initiatives including vulnerabilities, misconfigurations, and control gaps

n

Ensure timely, risk-prioritized delivery of remediation projects

n

Translate cyber requirements and control objectives into actionable workstreams, acceptance criteria, test plans, and measurable remediation steps

n

Coordinate response and resolution of security incidents within defined SLAs

n

MANDATORY SKILLS:

n

5+ years of technical project/program management experience in an enterprise workplace

n

SDLC & DevOps:

n

Practical experience with Software Development Life Cycle (SDLC)

n

Experience with DevOps/CI/CD pipelines and automated testing practices

n

Understanding of software quality engineering principles

n

Project Management:

n

Proven ability to define scope, prioritize work, remove blockers, manage timelines, and report progress with concise metrics

n

Strong stakeholder management and cross-functional leadership skills

n

Experience running technical working groups and Agile ceremonies

n

Tools & Platforms:

n

Proficiency with ticketing and orchestration tools (JIRA, ServiceNow)

n

Experience with GRC or vulnerability management platforms (Archer, Tenable, Qualys, Rapid7)

n

Familiarity with collaboration tools (Confluence, SharePoint, MS Teams)

n

Cybersecurity Expertise:

n

Hands-on understanding of security vulnerabilities, remediation processes, and common mitigation patterns (patching, configuration changes, secure coding fixes)

n

Experience with vulnerability management platforms and GRC tools

n

Knowledge of security frameworks (NIST CSF, ISO/IEC 27001, CIS Controls)

📌 Project Manager + Cybersecurity (Noida)
🏢 Sonata Software
📍 Noida